PT-2016-7640

CVE-2016-9073

·

Published

2016-11-15

·

Updated

2024-12-12

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 50
Description The issue allows WebExtensions to bypass security checks, potentially enabling them to load privileged URLs and escape the WebExtension sandbox.
Recommendations For versions prior to 50, update to version 50 or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2016-2307
ALT-PU-2017-1578
MGASA-2017-0323
OPENSUSE-SU-2016_2861-1
OPENSUSE-SU-2016_3011-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:14572-1
SUSE-SU-2019:2872-1
USN-3124-1
Found an issue in the description? Have something to add? Feel free to write us 👾